p PatchFirst

CVE-2023-39327

CVE-2023-39327 · Openjpeg: malicious files can cause the program to enter a large loop

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

CVSS 4.3 · Medium · EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat ai inference server 3.2

    Versions
    • ≥ 1772713830: Not affected (rpm)

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • openjpeg2 Debian:12

    Versions
    • 2.5.0-2
    • 2.5.0-2+deb12u1
    • 2.5.0-2+deb12u2
    • 2.5.0-2+deb12u3
    • 2.5.3-1
    • 2.5.3-1~exp1
    • 2.5.3-1~exp2
    • 2.5.3-2
    • 2.5.3-2.1
    • 2.5.3-2.1~deb13u1
    • 2.5.3-2.1~deb13u2
    • 2.5.4-1
    • 2.5.4-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Debian:13

    Versions
    • 2.5.3-2
    • 2.5.3-2.1
    • 2.5.3-2.1~deb13u1
    • 2.5.3-2.1~deb13u2
    • 2.5.4-1
    • 2.5.4-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Debian:14

    Versions
    • 2.5.3-2
    • 2.5.3-2.1
    • 2.5.3-2.1~deb13u1
    • 2.5.3-2.1~deb13u2
    • 2.5.4-1
    • 2.5.4-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg Ubuntu:14.04:LTS

    Versions
    • 1.3+dfsg-4.6ubuntu2
    • 1.3+dfsg-4.7ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ghostscript Ubuntu:Pro:16.04:LTS

    Versions
    • 9.16~dfsg~0-0ubuntu3
    • 9.16~dfsg~0-0ubuntu4
    • 9.18~dfsg~0-0ubuntu1
    • 9.18~dfsg~0-0ubuntu2
    • 9.18~dfsg~0-0ubuntu2.2
    • 9.18~dfsg~0-0ubuntu2.3
    • 9.18~dfsg~0-0ubuntu2.4
    • 9.18~dfsg~0-0ubuntu2.6
    • 9.18~dfsg~0-0ubuntu2.7
    • 9.18~dfsg~0-0ubuntu2.8
    • 9.18~dfsg~0-0ubuntu2.9
    • 9.25~dfsg+1-0ubuntu0.16.04.1
    • 9.25~dfsg+1-0ubuntu0.16.04.2
    • 9.25~dfsg+1-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.1
    • 9.26~dfsg+0-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.4
    • 9.26~dfsg+0-0ubuntu0.16.04.5
    • 9.26~dfsg+0-0ubuntu0.16.04.6
    • 9.26~dfsg+0-0ubuntu0.16.04.7
    • 9.26~dfsg+0-0ubuntu0.16.04.8
    • 9.26~dfsg+0-0ubuntu0.16.04.9
    • 9.26~dfsg+0-0ubuntu0.16.04.10
    • 9.26~dfsg+0-0ubuntu0.16.04.11
    • 9.26~dfsg+0-0ubuntu0.16.04.12
    • 9.26~dfsg+0-0ubuntu0.16.04.13
    • 9.26~dfsg+0-0ubuntu0.16.04.14
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm1
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm2
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm3
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm4
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm5
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm6
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm7
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm8
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.14+esm9

    Update to 9.26~dfsg+0-0ubuntu0.16.04.14+esm9

  • openjpeg2 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-2.1
    • 2.1.0-2.1ubuntu0.1
    • 2.1.2-1.1+deb9u2build0.1
    • 2.1.2-1.1+deb9u3build0.16.04.1
    • 2.1.2-1.1+deb9u3ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u5build0.16.04.1
    • 2.1.2-1.1+deb9u5ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6build0.16.04.1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: < 2.1.2-1.1+deb9u6ubuntu0.1~esm4

    Update to 2.1.2-1.1+deb9u6ubuntu0.1~esm4

  • blender Ubuntu:16.04:LTS

    Versions
    • 2.74+dfsg0-4build2
    • 2.75.a+dfsg0-2ubuntu2
    • 2.75.a+dfsg0-2ubuntu3
    • 2.76.b+dfsg0-3
    • 2.76.b+dfsg0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg Ubuntu:Pro:16.04:LTS

    Versions
    • 1:1.5.2-3.1
    • 1:1.5.2-3.1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:16.04:LTS

    Versions
    • 4.4.1-1
    • 4.4.1-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ghostscript Ubuntu:Pro:18.04:LTS

    Versions
    • 9.21~dfsg+1-0ubuntu3
    • 9.22~dfsg+1-0ubuntu1
    • 9.22~dfsg+1-0ubuntu1.1
    • 9.22~dfsg+1-0ubuntu1.2
    • 9.25~dfsg+1-0ubuntu0.18.04.1
    • 9.25~dfsg+1-0ubuntu0.18.04.2
    • 9.26~dfsg+0-0ubuntu0.18.04.1
    • 9.26~dfsg+0-0ubuntu0.18.04.3
    • 9.26~dfsg+0-0ubuntu0.18.04.4
    • 9.26~dfsg+0-0ubuntu0.18.04.5
    • 9.26~dfsg+0-0ubuntu0.18.04.6
    • 9.26~dfsg+0-0ubuntu0.18.04.7
    • 9.26~dfsg+0-0ubuntu0.18.04.8
    • 9.26~dfsg+0-0ubuntu0.18.04.9
    • 9.26~dfsg+0-0ubuntu0.18.04.10
    • 9.26~dfsg+0-0ubuntu0.18.04.11
    • 9.26~dfsg+0-0ubuntu0.18.04.12
    • 9.26~dfsg+0-0ubuntu0.18.04.13
    • 9.26~dfsg+0-0ubuntu0.18.04.14
    • 9.26~dfsg+0-0ubuntu0.18.04.15
    • 9.26~dfsg+0-0ubuntu0.18.04.16
    • 9.26~dfsg+0-0ubuntu0.18.04.17
    • 9.26~dfsg+0-0ubuntu0.18.04.18
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm1
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm2
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm3
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.18+esm4

    Update to 9.26~dfsg+0-0ubuntu0.18.04.18+esm4

  • blender Ubuntu:18.04:LTS

    Versions
    • 2.78.c+dfsg0-2build1
    • 2.79+dfsg0-2build1
    • 2.79+dfsg0-3
    • 2.79+dfsg0-3build1
    • 2.79.b+dfsg0-1
    • 2.79.b+dfsg0-1ubuntu1.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:18.04:LTS

    Versions
    • 4.12.2-dfsg1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.2.0-1
    • 2.3.0-1
    • 2.3.0-2build0.18.04.1
    • 2.3.0-2ubuntu0.1~esm1
    • 2.3.0-2+deb10u2build0.18.04.1
    • 2.3.0-2+deb10u2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: < 2.3.0-2+deb10u2ubuntu0.1~esm2

    Update to 2.3.0-2+deb10u2ubuntu0.1~esm2

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:18.04:LTS

    Versions
    • 4.5-1
    • 5.0.2-1
    • 5.0.2-1build1
    • 5.0.2-1build2
    • 5.0.2-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:20.04:LTS

    Versions
    • 2.3.0-2
    • 2.3.0-2build1
    • 2.3.1-1
    • 2.3.1-1ubuntu3
    • 2.3.1-1ubuntu4
    • 2.3.1-1ubuntu4.20.04.1
    Affected ranges
    • ECOSYSTEM: < 2.3.1-1ubuntu4.20.04.2

    Update to 2.3.1-1ubuntu4.20.04.2

  • blender Ubuntu:20.04:LTS

    Versions
    • 2.80+dfsg-3
    • 2.80+dfsg-3build1
    • 2.80+dfsg-4
    • 2.81.a+dfsg-5build3
    • 2.82+dfsg-1
    • 2.82+dfsg-1build1
    • 2.82.a+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:20.04:LTS

    Versions
    • 4.12.2-dfsg1-4.1ubuntu1
    • 4.13.2-dfsg1-1ubuntu1
    • 4.13.2-dfsg1-4ubuntu1
    • 4.13.2-dfsg1-6
    • 4.13.2-dfsg1-6ubuntu1
    • 4.13.2-dfsg1-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →